Hi @Peter_Puzanovs ,   I have a common rewrite file for all environment and if i add your rewrite rule for checking header then it is only for stage environment but what about dev/qa/production?   Thanks, Mahesh 

Hi @Himanshu_Jain    I am posting here the list of clientheaders as asked:   "X-Forwarded-Proto""X-Forwarded-SSL-Certificate""X-Forwarded-SSL-Client-Cert""X-Forwarded-SSL""X-Forwarded-Protocol""CSRF-Token""referer""user-agent""from""content-type""content-length""accept-charset""accept-encoding""acce...

Hi @Peter_Puzanovs ,   Let me try the above rule, but please could you mention why this error is showing ?   Thanks, Mahesh

Hi @ksh_ingole7 ,   please find the details below:   It was observed that HTTP HOST header is missing verification when sending web requests. One can change the host header to access other virtual hosts on the website such as api, solr, logs ,etc. Affected Items //stage-abc.com/ Observation We obs...

Hi All,   This isssue is reported by the security team and they want us to fix this. Please help me with the fix as i suspect we need to make changes on dispatcher leve. How do we verify the Missing Host Header in aem 6.5.14 @arunpatidar ,please could you suggest on the fix.   Thanks, Mahesh